App Logo
drata.com

Renew an evidence with a new file (Drata)

Uploads a new file to an evidence of the Drata evidence library, making it the current artifact and moving the previous one to past artifacts. Sets the creation date (today by default); Drata computes the next renewal date from the evidence's schedule. Returns the new current artifact with its creation and renewal dates. Requires being signed in to Drata.

Input

file required

The new artifact file (PDF, PNG, DOCX, XLSX, CSV, TXT, ZIP...).

fileName required

Name the file gets in Drata, with its extension, e.g. dependabot-2026-q4.png.

evidenceId required

Evidence id, as in .../compliance/evidence/<id>/current-artifacts (list_expiring_evidence returns it).

creationDate optional

Artifact creation date, yyyy-mm-dd. Defaults to today.

workspacePath optional

Workspace path of the app URL. Defaults to the one the app opens.

Output

renewed required
evidenceId required
status optional
current optional
evidenceName optional

FAQ

Uploads a new file to an evidence of the Drata evidence library, making it the current artifact and moving the previous one to past artifacts. Sets the creation date (today by default); Drata computes the next renewal date from the evidence's schedule. Returns the new current artifact with its creation and renewal dates. Requires being signed in to Drata.
Required: evidenceId, file, fileName. Optional: creationDate, workspacePath.
It returns status, current, renewed, evidenceId, evidenceName.
Yes. It acts as you on drata.com: on your own Chrome it reuses your session, and on a Reduck-hosted browser it loads the drata.com cookies saved by the Reduck extension.
It makes changes on drata.com, like sending, posting, booking or buying something.
Ask an AI agent connected to Reduck to run reduck/drata.com/renew_evidence, or run it from a terminal with the Reduck CLI: npx @reduck-ai/cli@latest run --script reduck/drata.com/renew_evidence
It is part of Reduck's official curated catalogue.

Related scripts

drata.com

Drata whoami (signed-in account)

Report which Drata account this browser is signed in as: the user id, email, first and last name, roles, account type, and the workspace and region the app opened. Being signed out is reported as a normal answer (loggedIn false), not an error, so it can be used to check a session before running other Drata scripts.

app.drata.com

Exclude a Drata monitoring finding

Exclude one failing resource (a repository, a person, a cloud resource) from a Drata monitoring test, with the written justification Drata shows auditors in its audit packages. Give the test page URL, the resource exactly as listed in the test's findings, and the reason. Needs a Drata session. It changes your compliance results, and undoing it is done from the test's Exclusions tab.

drata.com

Drata: list my policies

List the Drata policies assigned to the signed-in employee, with each policy's name, description, published date and whether (and when) the employee accepted it, plus totals. Read-only; it never accepts a policy.

Start building not clicking

Get started for free